program: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0x10000, 0x0, 0x6, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x28, 0x6, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r2, &(0x7f0000000540), 0x0, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0xfffffffa, @loopback, 0x28f2}}, 0x265e, 0x43, 0x4, 0x0, 0x0, 0x55, 0x81}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x800) [ 75.228784][ T4668] Bluetooth: hci0: command tx timeout [ 75.273757][ T5319] loop0: detected capacity change from 0 to 512 [ 75.347532][ T5319] ------------[ cut here ]------------ [ 75.349931][ T5319] EA inode 11 i_nlink=2 [ 75.350110][ T5319] WARNING: CPU: 0 PID: 5319 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.356567][ T5319] Modules linked in: [ 75.359191][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.362940][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.367914][ T5319] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.370844][ T5319] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 c7 1d f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 13 0e bd 08 44 89 f9 [ 75.379850][ T5319] RSP: 0018:ffffc9000d3bf100 EFLAGS: 00010246 [ 75.382467][ T5319] RAX: 068f3a60379b8a00 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.386242][ T5319] RDX: ffffc9000dd0a000 RSI: 0000000000008ede RDI: 0000000000008edf [ 75.389515][ T5319] RBP: ffffc9000d3bf1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 75.392967][ T5319] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 75.396585][ T5319] R13: ffff888043ddb340 R14: 1ffff110087bb656 R15: ffff888043ddb2b0 [ 75.399940][ T5319] FS: 00007f0a406bf6c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000 [ 75.403630][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.406452][ T5319] CR2: 00007f44f1b909c0 CR3: 000000004153a000 CR4: 0000000000352ef0 [ 75.409766][ T5319] Call Trace: [ 75.411230][ T5319] [ 75.412535][ T5319] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.415375][ T5319] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.418583][ T5319] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.425149][ T5319] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.427717][ T5319] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.429900][ T5319] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.432378][ T5319] __ext4_expand_extra_isize+0x30d/0x400 [ 75.434740][ T5319] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.437379][ T5319] ext4_evict_inode+0x80d/0xee0 [ 75.439543][ T5319] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.441900][ T5319] ? do_raw_spin_unlock+0x4d/0x240 [ 75.444173][ T5319] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.446738][ T5319] evict+0x504/0x9c0 [ 75.448516][ T5319] ? __pfx_evict+0x10/0x10 [ 75.450407][ T5319] ? do_raw_spin_unlock+0x4d/0x240 [ 75.452533][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 75.454702][ T5319] ? iput+0x946/0xc50 [ 75.456518][ T5319] ext4_orphan_cleanup+0xc20/0x1460 [ 75.458743][ T5319] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.461219][ T5319] ? ext4_register_li_request+0x640/0x720 [ 75.463602][ T5319] ? errseq_check_and_advance+0x66/0x120 [ 75.466022][ T5319] ext4_fill_super+0x5920/0x61e0 [ 75.468048][ T5319] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.470242][ T5319] ? snprintf+0xda/0x120 [ 75.472149][ T5319] ? __pfx_snprintf+0x10/0x10 [ 75.474062][ T5319] ? set_blocksize+0x21e/0x500 [ 75.476351][ T5319] ? sb_set_blocksize+0x104/0x180 [ 75.478570][ T5319] ? setup_bdev_super+0x4c1/0x5b0 [ 75.480736][ T5319] get_tree_bdev_flags+0x40e/0x4d0 [ 75.482943][ T5319] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.485172][ T5319] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.487732][ T5319] vfs_get_tree+0x92/0x2b0 [ 75.489586][ T5319] do_new_mount+0x302/0xa10 [ 75.491578][ T5319] ? apparmor_capable+0x137/0x1b0 [ 75.493706][ T5319] ? __pfx_do_new_mount+0x10/0x10 [ 75.496052][ T5319] ? ns_capable+0x8a/0xf0 [ 75.497923][ T5319] ? kmem_cache_free+0x19b/0x690 [ 75.500133][ T5319] __se_sys_mount+0x313/0x410 [ 75.502279][ T5319] ? __pfx___se_sys_mount+0x10/0x10 [ 75.504509][ T5319] ? do_syscall_64+0xbe/0xfa0 [ 75.506642][ T5319] ? __x64_sys_mount+0x20/0xc0 [ 75.508800][ T5319] do_syscall_64+0xfa/0xfa0 [ 75.510767][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.513012][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.516410][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.518501][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.521152][ T5319] RIP: 0033:0x7f0a3f79076a [ 75.523101][ T5319] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.531856][ T5319] RSP: 002b:00007f0a406bee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.535774][ T5319] RAX: ffffffffffffffda RBX: 00007f0a406beef0 RCX: 00007f0a3f79076a [ 75.539080][ T5319] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0a406beeb0 [ 75.542304][ T5319] RBP: 0000200000000180 R08: 00007f0a406beef0 R09: 0000000001a08700 [ 75.545782][ T5319] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.549061][ T5319] R13: 00007f0a406beeb0 R14: 0000000000000470 R15: 0000200000000700 [ 75.552596][ T5319] [ 75.554035][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.557461][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.561340][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.565765][ T5319] Call Trace: [ 75.567175][ T5319] [ 75.568468][ T5319] dump_stack_lvl+0x99/0x250 [ 75.570411][ T5319] ? __asan_memcpy+0x40/0x70 [ 75.572341][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.574504][ T5319] ? __pfx__printk+0x10/0x10 [ 75.576509][ T5319] vpanic+0x237/0x6d0 [ 75.578257][ T5319] ? __pfx_vpanic+0x10/0x10 [ 75.580173][ T5319] panic+0xb9/0xc0 [ 75.581769][ T5319] ? __pfx_panic+0x10/0x10 [ 75.583609][ T5319] __warn+0x31b/0x4b0 [ 75.585654][ T5319] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.588647][ T5319] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.591197][ T5319] report_bug+0x2be/0x4f0 [ 75.593142][ T5319] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.595810][ T5319] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.598272][ T5319] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 75.600830][ T5319] handle_bug+0x84/0x160 [ 75.602594][ T5319] exc_invalid_op+0x1a/0x50 [ 75.604533][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 75.606664][ T5319] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.609908][ T5319] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 c7 1d f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 13 0e bd 08 44 89 f9 [ 75.618422][ T5319] RSP: 0018:ffffc9000d3bf100 EFLAGS: 00010246 [ 75.621247][ T5319] RAX: 068f3a60379b8a00 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.624608][ T5319] RDX: ffffc9000dd0a000 RSI: 0000000000008ede RDI: 0000000000008edf [ 75.627891][ T5319] RBP: ffffc9000d3bf1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 75.631238][ T5319] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 75.634497][ T5319] R13: ffff888043ddb340 R14: 1ffff110087bb656 R15: ffff888043ddb2b0 [ 75.637748][ T5319] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.640240][ T5319] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.643608][ T5319] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.645949][ T5319] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.648303][ T5319] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.650519][ T5319] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.653038][ T5319] __ext4_expand_extra_isize+0x30d/0x400 [ 75.655395][ T5319] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.657698][ T5319] ext4_evict_inode+0x80d/0xee0 [ 75.659743][ T5319] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.662484][ T5319] ? do_raw_spin_unlock+0x4d/0x240 [ 75.664772][ T5319] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.667057][ T5319] evict+0x504/0x9c0 [ 75.668852][ T5319] ? __pfx_evict+0x10/0x10 [ 75.670778][ T5319] ? do_raw_spin_unlock+0x4d/0x240 [ 75.673107][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 75.675192][ T5319] ? iput+0x946/0xc50 [ 75.677002][ T5319] ext4_orphan_cleanup+0xc20/0x1460 [ 75.679276][ T5319] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.681626][ T5319] ? ext4_register_li_request+0x640/0x720 [ 75.683968][ T5319] ? errseq_check_and_advance+0x66/0x120 [ 75.686299][ T5319] ext4_fill_super+0x5920/0x61e0 [ 75.688431][ T5319] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.690646][ T5319] ? snprintf+0xda/0x120 [ 75.692567][ T5319] ? __pfx_snprintf+0x10/0x10 [ 75.694580][ T5319] ? set_blocksize+0x21e/0x500 [ 75.696578][ T5319] ? sb_set_blocksize+0x104/0x180 [ 75.698552][ T5319] ? setup_bdev_super+0x4c1/0x5b0 [ 75.700566][ T5319] get_tree_bdev_flags+0x40e/0x4d0 [ 75.702595][ T5319] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.704845][ T5319] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.707134][ T5319] vfs_get_tree+0x92/0x2b0 [ 75.709051][ T5319] do_new_mount+0x302/0xa10 [ 75.711009][ T5319] ? apparmor_capable+0x137/0x1b0 [ 75.714391][ T5319] ? __pfx_do_new_mount+0x10/0x10 [ 75.716582][ T5319] ? ns_capable+0x8a/0xf0 [ 75.718382][ T5319] ? kmem_cache_free+0x19b/0x690 [ 75.720464][ T5319] __se_sys_mount+0x313/0x410 [ 75.722436][ T5319] ? __pfx___se_sys_mount+0x10/0x10 [ 75.724696][ T5319] ? do_syscall_64+0xbe/0xfa0 [ 75.726722][ T5319] ? __x64_sys_mount+0x20/0xc0 [ 75.728736][ T5319] do_syscall_64+0xfa/0xfa0 [ 75.730666][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.733075][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.735603][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.737559][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.739910][ T5319] RIP: 0033:0x7f0a3f79076a [ 75.741725][ T5319] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.749078][ T5319] RSP: 002b:00007f0a406bee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.752572][ T5319] RAX: ffffffffffffffda RBX: 00007f0a406beef0 RCX: 00007f0a3f79076a [ 75.755875][ T5319] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0a406beeb0 [ 75.759130][ T5319] RBP: 0000200000000180 R08: 00007f0a406beef0 R09: 0000000001a08700 [ 75.762562][ T5319] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.765887][ T5319] R13: 00007f0a406beeb0 R14: 0000000000000470 R15: 0000200000000700 [ 75.769258][ T5319] [ 75.770904][ T5319] Kernel Offset: disabled [ 75.772772][ T5319] Rebooting in 86400 seconds..